# Docker Compose example for auth-gate
#
# This file is a minimal example. Adjust the environment variables
# and volumes to match your setup.

services:
  auth-gate:
    build: .
    image: yejayekhoob/auth-gate:latest
    container_name: auth-gate
    restart: unless-stopped
    expose:
      - "8080"
    environment:
      AUTH_GATE_PORT: "8080"
      AUTH_GATE_API_TOKEN: "${AUTH_GATE_API_TOKEN:-CHANGE_ME}"
      AUTH_GATE_BASIC_USER: "${AUTH_GATE_BASIC_USER:-admin}"
      AUTH_GATE_BASIC_PASSWORD: "${AUTH_GATE_BASIC_PASSWORD:-CHANGE_ME}"
      PERMANENT_WHITELIST_FILE: "/config/permanent_whitelist.txt"
      DATA_DIR: "/data"
    volumes:
      - ./config/permanent_whitelist.txt:/config/permanent_whitelist.txt:ro
      - auth-data:/data
    networks:
      - proxy_net
    read_only: true
    tmpfs:
      - /tmp
    security_opt:
      - no-new-privileges:true
    cap_drop:
      - ALL

volumes:
  auth-data:

networks:
  proxy_net:
    external: true